Skip to content
Vulnerability intelligence

CVE-2026-112775: Craft CMS account takeover

CVE-2026-112775 affects Craft CMS 5.0.0 to before 5.11.0. A code meant to work once can still take over an account.

2026
What WebPulse reported · 1 analysis
Craft CMS flaw lets a used email code reset a password

CVE-2026-112775 affects Craft CMS 5.0.0 to before 5.11.0. A code meant to work once can still take over an account.

October 22, 2026
View CVE-2026-112775 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795